Overview

overview

10

Static

static

10

TikTok#.apk

android-13-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TikTok#.apk

  • Size

    3.3MB

  • Sample

    240913-xe59vasgne

  • MD5

    c0dc87eb093913aac099e6e52ea810df

  • SHA1

    a70863d6fb7564e81d4867165e9381d9cd2d86a8

  • SHA256

    23d23ede447193122acb545e6cff008d385b13d814a36c678db965d4e053a87a

  • SHA512

    2674afbad0809e95862257d382e8dbeab14f0af4b2757fc0eab422a6bd514c00f758b7455ddcdfcc643e18420b1505a386ced061f217150e29a7cfd52ddf073e

  • SSDEEP

    98304:Z3YTPlToffum+rspiiawHOpMC4oM+vJoeO:Z3YTRsoUiiVHOpMrowB

Score
10/10
888ratandroidevasioninfostealerpersistencerattrojan

Malware Config

Targets

    • Target

      TikTok#.apk

    • Size

      3.3MB

    • MD5

      c0dc87eb093913aac099e6e52ea810df

    • SHA1

      a70863d6fb7564e81d4867165e9381d9cd2d86a8

    • SHA256

      23d23ede447193122acb545e6cff008d385b13d814a36c678db965d4e053a87a

    • SHA512

      2674afbad0809e95862257d382e8dbeab14f0af4b2757fc0eab422a6bd514c00f758b7455ddcdfcc643e18420b1505a386ced061f217150e29a7cfd52ddf073e

    • SSDEEP

      98304:Z3YTPlToffum+rspiiawHOpMC4oM+vJoeO:Z3YTRsoUiiVHOpMrowB

    Score
    10/10
    888ratevasioninfostealerpersistencerattrojan

    • 888RAT

      888RAT is an Android remote administration tool.

      trojaninfostealerrat888rat

    • Acquires the wake lock

    • Declares services with permission to bind to the system

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Requests dangerous framework permissions

    behavioral1

MITRE ATT&CK Mobile v15

Tasks